5b689d04c37b221fb03e4957edc64bf3a8fa7762a42b5257a64ed86f9e182c4b

Sharing

Copy URL

Twitter E-mail

General

Target

5b689d04c37b221fb03e4957edc64bf3a8fa7762a42b5257a64ed86f9e182c4b
Size

383KB
MD5

02a65851ad053ac7dcd6d5356b3f98a2
SHA1

86cbe36bb6c5e457af6f4e8612debed8fe705a6c
SHA256

5b689d04c37b221fb03e4957edc64bf3a8fa7762a42b5257a64ed86f9e182c4b
SHA512

5f7993a27a512cf469db62f45ffab7c30aaf9103549ddc2402e33ae5ea7cb144f1e8aa6515b85ca8ebc77d0825ed551a175cb0077f7bf4dad0ccf06cf93828bf
SSDEEP

6144:vtv0/gAOEYIMa6cNRFWT1c+CanC/KozbsiGRMV:F0/gaTS0aTS+CaC/ZTH

Score

N/A

Malware Config

Signatures

Files

5b689d04c37b221fb03e4957edc64bf3a8fa7762a42b5257a64ed86f9e182c4b
.exe windows x86

1a11dff136cbecb0b62a40882718be34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCursorPos
WindowFromPoint
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DefWindowProcW
SendMessageW
LoadImageW
SetWindowLongW
ValidateRect
TranslateMessage
GetMessageA
SetCursor
GetWindowThreadProcessId
UnregisterClassA
GetActiveWindow
FindWindowExW
GetClassInfoW
CharNextW
GetWindowLongW
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetSysColorBrush
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
GetSystemMetrics
ExitWindowsEx
LoadIconA
GetDesktopWindow
BeginPaint
IsIconic
DrawIcon
LoadBitmapA
MessageBoxA
GetParent
SendMessageA
OffsetRect
CopyRect
LoadImageA
EnableWindow
InvalidateRect
GetClientRect
GetWindowRect
PostMessageA
GetWindowDC
ReleaseDC
SetWindowRgn
GetTopWindow
SetDlgItemTextA
CharNextA
CharUpperA
wsprintfA
CreateDialogParamA
DialogBoxIndirectParamA
CharLowerA
DestroyIcon
FillRect
GetDlgItemTextA
wvsprintfA
LoadStringA
SetRect
FindWindowA
IntersectRect
SubtractRect
CharPrevA
WaitForInputIdle
DialogBoxParamA
MsgWaitForMultipleObjects
KillTimer
SetTimer
CharLowerBuffA
OpenClipboard
TrackPopupMenu
AppendMenuW
CreatePopupMenu
GetSystemMenu
SetClassLongW
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
CreateDialogParamW
SetWindowTextW
wsprintfW
SendMessageTimeoutW
LoadCursorW
DrawTextW

comdlg32

ChooseFontW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW
ChooseColorW
FindTextW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetMalloc
ShellExecuteA
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconW

advapi32

RegCloseKey
LookupPrivilegeValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
OpenProcessToken
RegOpenKeyExA
AdjustTokenPrivileges
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA

gdi32

CreateHalftonePalette
UnrealizeObject
SelectPalette
CreateFontIndirectW
GetBkMode
CreateSolidBrush
CreateRectRgnIndirect
EndDoc
StartDocW
CreatePalette
SelectClipRgn
RectInRegion
GetTextMetricsW
CreateCompatibleDC
GetBkColor
BitBlt
CreatePen
SelectObject
CombineRgn
GetSystemPaletteEntries
GetDIBColorTable
GetTextExtentPoint32A
CreateFontA
CreateDIBitmap
Polyline
TranslateCharsetInfo
CreateRectRgn
CreateFontIndirectA
GetStockObject
GetDeviceCaps
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
DeleteObject
GetDIBits
GetObjectA
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
GetObjectW
CreateDIBSection
GetTextExtentPoint32W
SetTextAlign
ExtTextOutW
LineTo
Rectangle
SetROP2
MoveToEx
EndPage
StretchBlt
RealizePalette
StartPage

comctl32

_TrackMouseEvent
ImageList_Create
ImageList_DrawEx
ImageList_Destroy
InitCommonControlsEx
ImageList_Add
ImageList_ReplaceIcon
CreateToolbarEx
CreatePropertySheetPageW
CreateStatusWindowW
PropertySheetW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

netapi32

NetEnumerateComputerNames

shlwapi

ColorRGBToHLS
UrlUnescapeW
PathFindFileNameA
ColorHLSToRGB
PathFindExtensionA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

kernel32

SetLastError
GetModuleHandleA
GetProcAddress
lstrlenA
CompareStringA
GetVersion
MultiByteToWideChar
GetCurrentProcess
CreateProcessA
GetLastError
FormatMessageA
GetModuleFileNameW
WaitForSingleObject
GetExitCodeProcess
GetSystemDirectoryA
GetModuleFileNameA
GetVersionExA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
FreeLibrary
MulDiv
GlobalUnlock
GlobalLock
lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GlobalFree
GlobalAlloc
lstrcmpA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
CloseHandle
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetThreadLocale
WritePrivateProfileStringA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
CreateFileA
SetErrorMode
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapFree
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
GetStdHandle
RtlUnwind
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
RaiseException
GetACP
IsValidCodePage
GetTimeZoneInformation
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
HeapSize
CompareStringW
SetEnvironmentVariableA
LocalFree

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a11dff136cbecb0b62a40882718be34

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

advapi32

gdi32

comctl32

version

netapi32

shlwapi

winspool.drv

kernel32

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 6KB - Virtual size: 332KB

.code Size: 9KB - Virtual size: 9KB

.rsrc Size: 207KB - Virtual size: 206KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 6KB - Virtual size: 332KB

.code
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 207KB - Virtual size: 206KB